Eu Classified Information Regulation Eu-Vs-Vo

Original Language Title: EU-Verschlusssachen-Verordnung – EU-VS-VO

Read the untranslated law here: https://www.global-regulation.com/law/austria/2996399/eu-verschlusssachen-verordnung--eu-vs-vo.html

Subscribe to a Global-Regulation Premium Membership Today!

Key Benefits:

Subscribe Now for only USD$20 per month, or Get a Day Pass for only USD$4.99.
178. Regulation of the President of the National Council on the during the transmission and distribution of templates, documents, reports, information, and communications projects in the framework of the European Union to these technical requirements, as well as their labelling to respecting the confidentiality of (EU classified information regulation EU-VS-VO)

Due to section 7 paragraph 1 of the Appendix 2 to the rules of Procedure Act 1975, Federal Law Gazette No. 410, as last amended by the Federal Act Federal Law Gazette I no. 31/2013, is prescribed:

Scope

1. (1) this Regulation applies to the area of the administration of the institutions of the federal legislation.

(2) as far as federal regulations are referenced in this regulation, these shall apply in their respectively valid version.

EU classified information, definitions

2. (1) EU classified information within the meaning of this regulation are all templates marked with an EU classification, documents, reports, information, and communications projects in the framework of the European Union, whose unauthorised disclosure of which could harm the interests of the European Union or one or more of its Member States in varying degrees.

(2) EU classified information are classified in one of the following security levels:



1. Restreint UE/EU restricted: templates, documents, reports, information and communications projects in the framework of the European Union, whose unauthorised disclosure of which could be disadvantageous for the essential interests of the European Union or one or more of its Member States.

2. Confidentiel UE/EU confidential: templates, documents, reports, information and communications projects in the framework of the European Union, whose unauthorised disclosure of which could harm the essential interests of the European Union or one or more of its Member States.

3. secret UE/EU secret: templates, documents, reports, information and communications projects in the framework of the European Union, whose unauthorised disclosure could inflict serious damage to the essential interests of the European Union or one or more of its Member States.

4. Très secret UE/EU top secret: templates, documents, reports, information and communications projects in the framework of the European Union, whose unauthorised disclosure could inflict serious damage to the essential interests of the European Union or one or more of its Member States.

(3) by Austrian institutions created, the National Council and the Federal Council pursuant to § 3 I are EU-Information Act, Federal Law Gazette No. 113/2011, submitted documents to handle to which they apply as those EU classified information.

(4) the definitions in Appendix A of the decision of the Council of 31 March 2011 of the safety regulations apply the terms "Processing", "Owner", "Downgrade" and "Publisher" for the protection of EU classified information (2011/292/EC).

Access to EU classified information

3. (1) access to EU classified information may be granted only to persons, were demonstrably directed pursuant to section 4 on how to deal with EU classified information and



1 are authorized according to the provisions of Appendix 2 to the rules of procedure law in 1975 or 2 for the access for the performance of their official duties is required and a security check in accordance with §§ 55-55 b Security Police Act, Federal Law Gazette No. 566/1991, was carried out.

(2) of the persons, who in fact access to EU classified information of degrees of confidentiality "Confidentiel UE/EU confidential" or have received higher, as well as on the date of the respective access are to maintain appropriate records.

Safety instruction

4. (1) the security policy is designed to raise awareness of threats to the security of EU classified information and to ensure that the intended safety standards in compliance with the EU regulations are respected. It has to be done in writing prior to the opening of access to EU classified information and must be repeated at least at the beginning of each legislative period of the National Council, as well as in the case of a modification or addition to the relevant regulations and obligations.

(2) in the case of servants of the parliamentary staff, the security policy has to include also the obligation of official secrecy and the penalties for their violation.

(3) the detection of security policy is to put in writing.

Establishment of protected areas

§ 5. To physical protection of EU classified information, following similarly protected areas are set up:



1. administrative areas: areas with visible external definition to enable the control of people who are unaccompanied are only accessed by those people, have received an empowerment. All other persons, a constant accompaniment by an authorized person or an equivalent control is to ensure.

2. specially protected areas: areas with visible and protected boundaries with full input and output control that unaccompanied may only be accessed by specially authorised or validated security people. All other persons, a constant monitoring by a person specifically authorized or safety-checked or an equivalent control is to ensure.

3. specially protected area with privacy protection: area, which is also technically secured. Unauthorized communications or electronic equipment or communication devices are banned. Regular inspections and technical checks are carried out.

Storage and processing

EU classified information are § 6 (1) to keep the respective classification accordingly secured in a locked container. This is the storage of EU classified information



1 the degree of confidentiality "Restreint UE/EU restricted" in the administration area or specially protected area in a suitable, lockable office furniture, 2 the degree of confidentiality "Confidentiel UE/EU confidential" and "secret UE/EU secret" in the specially protected area in a Security container or vault, 3rd degree of confidentiality "très secret UE/EU top secret" in the specially protected area in a) a safety container with constant surveillance or control or approved burglar alarm system in conjunction with readiness staff in the security service or b) a vault equipped with a burglar alarm system in Connection with readiness staff in the security service.

(2) EU classified of the degree of confidentiality "Restreint UE/EU restricted" may be recorded for a limited period of time outside of the protected areas, when transported in a packaging, which allows no conclusions on the contents, and the owner according to the safety instructions in accordance with § 4 guarantees a standard of security as in the protected areas.

(3) the handling of EU classified information occurs basically in protected areas, where the handling of EU classified information



1. up to the level "secret UE/EU secret" administrative 2. the degree of non-disclosure is permitted, provided that they are protected from unauthorized access, "très secret UE/EU top secret" is carried out exclusively in the specially protected area.

(4) EU classified information up to the classification "secret UE/EU secret" may be processed outside of the protected areas, if



1 transport packaging takes place, which allows no conclusions on the contents, and the owner according to the safety instructions in accordance with § 4 guarantees a standard of security as in the protected areas, as well as 2 at EU classified information of degrees of confidentiality "Confidentiel UE/EU confidential" and "secret UE/EU secret" the owner at any time stops the EU classified under personal control and set the registry editing outside of the protected areas in knowledge.

Registration

7. (1) EU classified information of degrees of confidentiality "Confidentiel UE/EU confidential", "secret UE/EU secret" and "très secret UE/EU top secret" are to register. For this, a registry as specially protected area is set up.

(2) the registration is done in books provided for this purpose, which are according to degrees of confidentiality to distinguish and to use exclusively for EU classified information within the meaning of this regulation. Business books for EU classified information of degrees of confidentiality "Confidentiel UE/EU confidential" and "secret UE/EU secret" are at least to the level "Restreint UE/EU restricted", business books for EU classified information, the degree of confidentiality "très secret UE/EU top secret" with the degree of confidentiality "secret UE/EU secret" to provide.

To register (3) are receiving a registration requiring EU classified as well as its reproduction, translation, distribution, return, downgrade, sharing and destruction.

(4) any registration based EU classified is to be provided with an own business number. Anyway, the date of receipt, the editor, the subject and the degree of confidentiality, the respective number of the copy, the addressee's name and the date of delivery, return, downgrade, sharing, and destruction are to hold.


(5) in the case of a downgrade, registration in the books of the past as well as the new confidentiality level has to be done. Recipient of a registered EU classified are to inform of the demotion or release.

(6) be EU classified of the degree of confidentiality "très secret UE/EU top secret" transmitted by a different authority than the central registry in the Federal Ministry for European and international affairs, then this it immediately verifiably informed to put.

Copies and translations

8. (1) copies and translations of EU classified information of degree of confidentiality "Confidentiel UE/EU confidential" or higher may be customized by the registry in specially protected areas. The making of copies and translations of EU classified information of degree of confidentiality "très secret UE/EU top secret" is allowed only with prior written consent of the Publisher.

(2) each copy is to label as such and to customize through the respective number of the copy.

(3) on any copy or translation, the date, the business number and the Publisher are as well as on each side of the degree of secrecy, to attach a page numbering and the respective number of the copy.

(4) a marking in accordance with par. 2 and 3 in individual cases is not possible, other appropriate measures for the labelling be applied after you set the Registraturverantwortlichen.

(5) the provisions applicable to the original a EU classified shall apply to copies and translations.

Distribution and transport

9. (1) the distribution of EU classified information of degree of confidentiality "Restreint UE/EU restricted" EU information law in conjunction with section takes place through the databases in accordance with § 2 par. 2 and 3 3 Z 3 of Appendix 2 to the rules of Procedure Act 1975.

(2) the distribution of EU classified information of degree of confidentiality "Confidentiel UE/EU confidential" or higher are carried out by the registry.

(3) EU classified information of the confidentiality level ' Confidentiel UE/EU confidential "or higher are to be given against receipt. The transfer has to be made that are authorized for the respective classification by persons.

(4) for transport within the buildings corresponding to the Parliament are EU classified information up to the level "secret UE/EU secret" to pack that any conclusions on their content are possible. EU classified information of degree of confidentiality "très secret UE/EU top secret" are to carry on which only the name of the recipient is specified in a secure envelope.

Destruction

10. (1) EU classified information are no longer required, they are by means of appropriate mechanisms in accordance with DIN 66399 to destroy. Registration based EU classified information will be destroyed only by the Registrar's Office advised the Registraturverantwortlichen.

(2) over the destruction of a destruction Protocol is to apply that to be kept is instead of destroyed EU classified. Destruction protocols for EU classified information of degrees of confidentiality "Confidentiel UE/EU confidential" and "secret UE/EU secret" are at least five years, destruction protocols for EU classified information, the degree of confidentiality "très secret UE/EU top secret" at least ten years to be kept.

(3) the Registraturverantwortliche has to determine when a EU classified is to destroy.

Service instructions

§ 11. Service instructions are to lay down in particular:



1 administration areas and specially protected areas as well as the management of the respective keys and codes, 2. patterns for the detection of security policy, the registration information, acknowledgement of receipt and destruction Protocol.

Control

§ 12. The information security system is proven to check at least once in a calendar year. A change of the Registraturverantwortlichen is a complete inventory of the registry.

Prammer